8.5
/ 10
HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
A local privilege escalation vulnerability exists in
the restore mechanism of
ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM.
For more information, please refer to section Security Update for MyAsus in the ASUS Security Advisory.
the restore mechanism of
ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM.
For more information, please refer to section Security Update for MyAsus in the ASUS Security Advisory.
AI Analysis
Local privilege escalation vulnerability in ASUS System Control Interface's restore mechanism
Basic Information
ID
CVE-2025-59373
Source
ASUS
Published
Nov 25, 2025 at 02:03
Affected Product
Vendor
ASUS
Product
MyASUS
Affected Versions
ASUS MyASUS 0
CWE Classification
AI Assessment
AI Score
8.5 / 10
AI Severity
High
Vendor
ASUS
Product
MyASUS